AI tools now essential as Europe tightens anti-money laundering rules

European financial institutions face increasing pressure to overhaul their anti-money laundering (AML) practices as a new analysis warns the existing framework is falling short. A study published by EU regulation expert Professor Andrea Minto and ThetaRay's Vice President of Regulatory Affairs, Yaron Hazan, argues that legacy systems cannot keep pace with evolving regulatory expectations and financial complexity across the region.

Compliance challenges

The research finds that, despite higher compliance budgets and stricter enforcement in recent years, outcomes remain poor. According to the Financial Action Task Force (FATF), 97% of 120 countries assessed, including those in Europe, demonstrate only low to moderate effectiveness in combating money laundering and terrorist financing. Data from European Financial Intelligence Units (FIUs) indicate low conversion rates from suspicious activity reports (SARs) to actionable intelligence. For instance, in the Netherlands, fewer than 3.5% of the 3.48 million reports filed in 2024 were deemed suspicious. In France, only about 5% of SARs submitted to the Tracfin agency were actionable.

German authorities report that just 15% of SARs are investigated by law enforcement, while 95% of forwarded cases do not result in prosecution. An operational risk study cited in the report revealed that rules-based systems only yielded reporting in 2% of observed cases, highlighting the limited efficiency of traditional detection mechanisms.

Structural weaknesses

The study identifies persistent inefficiencies in the prevailing AML regime, pointing to high false-positive rates and a disconnect between data alerts and genuine criminal activity. Legacy rules-based platforms, the report says, tend to produce large volumes of low-quality alerts, are hampered by siloed data structures, and lack sufficient cross-border visibility to address modern, network-based financial crime.

Emerging risks in sectors such as correspondent banking and crypto-asset flows, where rule-based approaches are less effective at tracking hidden behaviour across borders, are also underlined as vulnerabilities.

"The data is clear: Europe's AML system is no longer keeping pace with financial complexity," said Yaron Hazan, Vice President of Regulatory Affairs, ThetaRay. "For years, institutions have been trapped in a cycle of rule tuning, manual investigations, and defensive reporting, without materially improving outcomes. Under the new regulatory regime, failing to adopt AI will become a compliance vulnerability in itself."

Regulatory changes

The European Union is undergoing a significant transformation of its AML oversight, driven by two main legislative initiatives. The AML Package introduces strengthened due diligence duties, increased governance demands, and sets up a new EU-level Anti-Money Laundering Authority to standardise obligations across member states. Concurrently, the Artificial Intelligence Act categorises transaction monitoring and sanctions screening as "high-risk" AI uses, imposing requirements on transparency, human management, data governance, and model oversight.

The study also notes friction between AML regulatory demands and the data privacy obligations imposed by the General Data Protection Regulation (GDPR). The researchers warn that, without more explicit guidance, financial actors may confront overlapping legal and compliance risks.

Future mandates

The report suggests the integration of advanced AI-driven tools is becoming a basic requirement, rather than an option, for financial institutions operating under the EU's new supervisory standards. It calls for a fundamental shift from volume-based alerting towards intelligence-driven detection systems, hybrid human and AI analysis, a commitment to data governance aligned with new laws, and a focus on transparent, explainable technology models.

"Europe's new AML framework fundamentally raises the standard for what effective compliance means," said Andrea Minto, Professor of Law and Regulation of Financial Markets at Ca' Foscari University of Venice and the University of Stavanger. "The AML Package and the AI Act make clear that the integration of AI into customer due diligence and AML monitoring is inevitable. Financial institutions must now prepare for a world in which technological capability and legal obligation are inseparable."